[Qgis-psc] Code signing for Mac version

[Sandro Santilli]

On Wed, Sep 30, 2015 at 09:52:02AM +0200, Richard Duivenvoorde wrote:
> On 30-09-15 00:36, Nyall Dawson wrote:
> > On 30 September 2015 at 02:45, Larry Shaffer <larrys at dakotacarto.com> wrote:
> > 
> >> The questions are:
> >>
> >> * Should code singing be done? (obviously +1 from me)
> > 
> > Sounds like a great idea to me. I'm no fan of Apple, but I can see the
> > harm which is caused to our project by the current state of the OSX
> > releases. Anything that makes it easier for users to test & give
> > feedback re the OSX builds BEFORE a release gets my support!
> 
> I'll second this (not being an Apple fan), it is funny we pay Apple
> money to give our QGIS users a better FOSS experience.

I'm not sure but I think Larry was saying that the money doesn't
necessarely have to go to Apple, but can go to any certificate
authority that is already in the Apple's trusted bucket ?

Larry, do you confirm ?
If this is the case, would the certificate used for the
website (GlobalSign nv-sa) also work ? 

> IF we host the packages ourselves, we can at least give the downloaders
> a popup like current windows users, in which we can make a statement
> (Tim you are much better in this wording...) like: Apple users, the
> project had to pay money for you to get a good installer, please
> consider a donation to give back... (and consider moving to Linux ;-) )

This would be nice, and money well spent if they weren't going to Apple :)
Is this really already happening for windows downloads already ? 

--strk;